RHBA-2024:3593MediumCVSS 7.5

Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.9.4 bug fixes and container updates

Published
June 4, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (4)

CVE-2023-26159 →CVE-2024-4068 →CVE-2024-21501 →CVE-2024-28176 →

📋 Description

CVE-2023-26159 — follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() CVE-2024-4068 — braces: fails to limit the number of characters it can handle CVE-2024-21501 — sanitize-html: Information Exposure when used on the backend CVE-2024-28176 — jose: resource exhaustion

🎯 Affected products176

  • Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:1ecb79149d368c693b02a8974dd868b7b05c8c04d6866d034216c44984e8e2c1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:a03843f2bec33dfc4885300a94f425b6ef951356f6ce18d0785bda4ecc229e7d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:a7e263a053d71bbef8e924b2126b17c6637a701c8e87288d52fa65491365b76a_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-cluster-permission-rhel8@sha256:c429df87ad09798a8b6b884a84b160344e211b8221dbf095adaf9ddbc0b66fb4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:02ac0fbf43452c6516b04cc8b889e527948587ebf72b0f59361448913e45b813_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:04fd1bfc2e832ff16318854233cf39b4463e67e7bb572f87d17b3cafb4b4aa73_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:9b2e02c845c10151fbbb9f7263c4229b53c8bc96e090f478eb65ba0a9bbdd428_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-addon-controller-rhel8@sha256:f6fbd0e2434cc2129a1a26ca3d83947d2a57b355bb3d8245589c9597961bbf4d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:0470d561f045a5b9183138ff1ab34547fc47eb26e4a963d1bac5bcc02835149d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:7f064a0813913621d0f22fe0cf0622a0bac0764dec81b0991ecc6d703ced2580_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:e5e4b3f6ff5601af4e9ffe5e4ae7e01d7be4ae6dfe2a76aba99fdf629f1d98b9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-governance-policy-framework-addon-rhel8@sha256:eeac3da15216eb92d1ebfbf2daad46b25b1576a71bf926d6f41c94ca77fac994_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:0c8d931aaadf12705981f8c0548cd98d542a9685fe93aa8bc7782b9d77097502_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:6a5fe86beaf118be6048d945b4a6c0e7a7eae43b0135d25f21af3a22239eea1d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:93a5adc523c9d04edfb3a1a9b897bc392981671a8b544215be93032e5579babb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-grafana-rhel8@sha256:b831b52829076e8c845496c42ea05891d3646c0126f39497a81c22601b5d28cb_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:15add445d96309cf3d6c382f9bd945864009d4438e82c3eeef8954bea201b6d3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:730ccedece201b80376a10b0ca7694a5b85dcb19f884f6e09edec51e8ad674cb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:a0cd12d68f0762fdc49be5688d48174ec1043254321e69116cccb8d907807a96_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-must-gather-rhel8@sha256:cfd8728d087d89cccd95e8b23cb01d9d3c15b6c82f571a570c977729058d68f5_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:1e683defe878d22c842de9c3e9dab12ce93b060f636ec5df4740d0c548a66057_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:480944ccd88f3bc8860cac64b5cd5a7eae48e6ee813210255e612ef75bb1a31e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-operator-bundle@sha256:85f52fcaec3501bbbf51d2de16b212843ff66bbe28c0c1eb1c312f5ce3a431b9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:545f9d78cf4c3fa1dae118655e5bb2e3ccafb659770bc8242e73becfba045b92_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:7d607063802a69369b606de70de0c8d0ccead20636d6133e67606dbe5d635dd8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:c831acd5646c9effb02a2ed290b4f65b80cdab8c12c1776f765962b0bdf72ca5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-config-reloader-rhel8@sha256:cda4fb151b114a336ecdf840ac5049bf4e4ce2ee900e9845df887319c5aef36f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:a600b5f6aca9994e6b563d1fc9e188a9ea9d5c3129af21ac67881abd8de950f0_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • rhacm2/acm-prometheus-rhel8@sha256:d32c2d9a2f6e58ebbf837e093732a6bc6432c809715c489e52c260479c38e72d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.9 for RHEL 8
  • +146 more not shown

✅ Remediation

For Red Hat Advanced Cluster Management for Kubernetes, see the following documentation, which will be updated shortly for this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.9/html-single/install/index#installing Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)